Test ID:	1.3.6.1.4.1.25623.1.0.170278
Category:	Web application abuses
Title:	WordPress Blog2Social Plugin < 6.9.10 Multiple Vulnerabilities
Summary:	The WordPress plugin 'Blog2Social' is prone to multiple; vulnerabilities.
Description:	Summary: The WordPress plugin 'Blog2Social' is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2022-3246: The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers. - CVE-2022-3247: The plugin does not have authorisation in an AJAX action, and does not ensure that the URL to make a request to is an external one. As a result, any authenticated users, such as subscriber could perform SSRF attacks. Affected Software/OS: WordPress Blog2Social plugin prior to version 6.9.10. Solution: Update to version 6.9.10 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-3246 https://wpscan.com/vulnerability/ece049b2-9a21-463d-9e8b-b4ce61919f0c Common Vulnerability Exposure (CVE) ID: CVE-2022-3247 https://wpscan.com/vulnerability/ee312f22-ca58-451d-a1cb-3f78a6e5ecaf
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.